Blackberry vulnerabilities2 known to be exploited.
Blackberry has 82 published vulnerabilities across 41 products in our catalogue. 2 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Qnx Software Development Platform, with 17. If you run Blackberry software, patch the exploited flaws first.
The most recent Blackberry flaw added to the known-exploited list is CVE-2020-1938, on 3 March 2022. We keep watching the known-exploited list.
Which Blackberry products have the most vulnerabilities?
Qnx Software Development Platform leads with 17 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Blackberry vulnerabilities are being exploited?
2 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Apache Tomcat Improper Privilege Management Vulnerability
Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection.
- 6.5SaltStack Salt Path Traversal Vulnerability
SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users.
Which Blackberry flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.
- 86%
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.
- 11%CVE-2025-3943Medium
Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection.
- 8.2%CVE-2013-2687High
Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows...
- 6.9%CVE-2008-3246Critical
Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite!
- 6.7%CVE-2013-2688Medium
Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute...
- 5.9%CVE-2008-3024Critical
Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/.
- 5.7%CVE-2014-2389Critical
Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has been previously enabled, allows remote attackers to execute...
- 4.4%CVE-2015-4111Medium
mc_demux_mp4_ds.ax in an unspecified third-party codec demux in BlackBerry Link before 1.2.3.53 with installer before 1.1.0.22 allows remote attackers to execute arbitrary code via a crafted MP4 file.
- 4.1%CVE-2016-1914High
Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to execute arbitrary SQL commands...
All Blackberry products we track.
31 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Qnx Software Development Platformqnx_software_development_platform17 vulnerabilities7 versions
- Enterprise Serverenterprise_server8 vulnerabilities11 versions
- Unified Endpoint Managerunified_endpoint_manager7 vulnerabilities19 versions
- Athocathoc5 vulnerabilities4 versions
- Blackberry Enterprise Serviceblackberry_enterprise_service5 vulnerabilities6 versions
- Blackberry OSblackberry_os5 vulnerabilities30 versions
- Qnx Neutrino Rtosqnx_neutrino_rtos4 vulnerabilities2 versions
- Unified Endpoint Managementunified_endpoint_management4 vulnerabilities11 versions
- Blackberry Linkblackberry_link3 vulnerabilities5 versions
- Enterprise Serviceenterprise_service3 vulnerabilities16 versions
- Protectprotect3 vulnerabilities1 version
- Workspaces Serverworkspaces_server3 vulnerabilities14 versions
- Workspaces Vappworkspaces_vapp3 vulnerabilities19 versions
- Enterprise Server Expressenterprise_server_express2 vulnerabilities1 version
- Qnx Momenticsqnx_momentics2 vulnerabilities5 versions
- Qnx OS for Medicalqnx_os_for_medical2 vulnerabilities5 versions
- Qnx OS for Safetyqnx_os_for_safety2 vulnerabilities8 versions
- Workspaces Appliance-Xworkspaces_appliance-x2 vulnerabilities1 version
- Appliance-Xappliance-x1 vulnerability1 version
- Blackberry Tablet OSblackberry_tablet_os1 vulnerability1 version
- Blackberry Universal Device Serviceblackberry_universal_device_service1 vulnerability1 version
- Blackberry Worldblackberry_world1 vulnerability3 versions
- Enterprise Mobility Serverenterprise_mobility_server1 vulnerability10 versions
- Good Controlgood_control1 vulnerability1 version
This directory lists the 31 Blackberry products with at least one tracked version, of 41 in our catalogue.
Running Blackberry? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.
- Matched to
- Blackberry on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 82 published vulnerabilities across 41 products and 193 versions from Blackberry. The most recent Blackberry flaw added to the known-exploited list is CVE-2020-1938, on 3 March 2022.
2 Blackberry vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2020-1938 and CVE-2020-11652. The full list is on this page.
Qnx Software Development Platform, with 17 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Blackberry products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.